Lucene search
HistoryDec 07, 2013 - 9:55 p.m.
CVE-2013-0848
cve
2013-0848
ffmpeg
libavcodec
huffyuv.c
decode_init
remote
dos
nvd
8.3 High
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.003 Low
EPSS
Percentile
71.3%
The decode_init function in libavcodec/huffyuv.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted width in huffyuv data with the predictor set to median and the colorspace set to YUV422P, which triggers an out-of-bounds array access.
Affected configurations
Node
ffmpegffmpegRange≤1.0
ORffmpegffmpegMatch0.3
ORffmpegffmpegMatch0.3.1
ORffmpegffmpegMatch0.3.2
ORffmpegffmpegMatch0.3.3
ORffmpegffmpegMatch0.3.4
ORffmpegffmpegMatch0.4.0
ORffmpegffmpegMatch0.4.2
ORffmpegffmpegMatch0.4.3
ORffmpegffmpegMatch0.4.4
ORffmpegffmpegMatch0.4.5
ORffmpegffmpegMatch0.4.6
ORffmpegffmpegMatch0.4.7
ORffmpegffmpegMatch0.4.8
ORffmpegffmpegMatch0.4.9pre1
ORffmpegffmpegMatch0.5
ORffmpegffmpegMatch0.5.1
ORffmpegffmpegMatch0.5.2
ORffmpegffmpegMatch0.5.3
ORffmpegffmpegMatch0.5.4
ORffmpegffmpegMatch0.5.4.5
ORffmpegffmpegMatch0.5.4.6
ORffmpegffmpegMatch0.6
ORffmpegffmpegMatch0.6.1
ORffmpegffmpegMatch0.6.2
ORffmpegffmpegMatch0.6.3
ORffmpegffmpegMatch0.7
ORffmpegffmpegMatch0.7.1
ORffmpegffmpegMatch0.7.2
ORffmpegffmpegMatch0.7.3
ORffmpegffmpegMatch0.7.4
ORffmpegffmpegMatch0.7.5
ORffmpegffmpegMatch0.7.6
ORffmpegffmpegMatch0.7.7
ORffmpegffmpegMatch0.7.8
ORffmpegffmpegMatch0.7.9
ORffmpegffmpegMatch0.7.11
ORffmpegffmpegMatch0.7.12
ORffmpegffmpegMatch0.8.0
ORffmpegffmpegMatch0.8.1
ORffmpegffmpegMatch0.8.2
ORffmpegffmpegMatch0.8.5
ORffmpegffmpegMatch0.8.5.3
ORffmpegffmpegMatch0.8.5.4
ORffmpegffmpegMatch0.8.6
ORffmpegffmpegMatch0.8.7
ORffmpegffmpegMatch0.8.8
ORffmpegffmpegMatch0.8.10
ORffmpegffmpegMatch0.8.11
ORffmpegffmpegMatch0.9
ORffmpegffmpegMatch0.9.1
ORffmpegffmpegMatch0.10
ORffmpegffmpegMatch0.10.3
ORffmpegffmpegMatch0.10.4
ORffmpegffmpegMatch0.11
Related
cvelist
cvelist
CVE-2013-0848
2013-12-07 21:00:00
nvd
nvd
CVE-2013-0848
2013-12-07 21:55:09
ubuntucve
ubuntucve
CVE-2013-0848
2013-12-07 00:00:00
prion
prion
Out-of-bounds
2013-12-07 21:55:00
debiancve
debiancve
CVE-2013-0848
2013-12-07 21:55:09
nessus
nessus
Mandriva Linux Security Advisory : ffmpeg (MDVSA-2014:227)
2014-11-26 00:00:00
GLSA-201502-08 : Libav: Multiple vulnerabilities
2015-02-09 00:00:00
Debian DSA-3003-1 : libav - security update
2014-08-12 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201502-08
2015-09-29 00:00:00
Debian Security Advisory DSA 3003-1 (libav - security update)
2014-08-10 00:00:00
Debian: Security Advisory (DSA-3003-1)
2014-08-09 00:00:00
osv
osv
libav - security update
2014-08-10 00:00:00
gentoo
gentoo
Libav: Multiple vulnerabilities
2015-02-07 00:00:00
debian
debian
[SECURITY] [DSA 3003-1] libav security update
2014-08-10 21:28:40
8.3 High
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.003 Low
EPSS
Percentile
71.3%
Related for CVE-2013-0848